Conditionally Load CF7 Security & Risk Analysis

wordpress.org/plugins/cf7-conditional-load

Load Contact Form 7 & select CF7-related plugin scripts & styles only where needed.

100 active installs v1.0.47 PHP 7.0+ WP 4.7.0+ Updated Dec 16, 2025
contact-form-7cssjavascriptperformancescripts
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Conditionally Load CF7 Safe to Use in 2026?

Generally Safe

Score 100/100

Conditionally Load CF7 has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The "cf7-conditional-load" plugin v1.0.47 exhibits a strong security posture based on the provided static analysis. The plugin demonstrates good development practices by avoiding dangerous functions, utilizing prepared statements for all SQL queries, and having a high percentage of properly escaped output. The presence of nonce and capability checks further bolsters its security. The absence of any recorded vulnerabilities, historical or otherwise, is a significant positive indicator. The limited attack surface with no identified unprotected entry points (AJAX, REST API, shortcodes, cron events) is also commendable. Taint analysis revealing zero unsanitized paths or critical/high severity flows suggests that user-supplied input is being handled securely. Overall, this plugin appears to be well-coded and maintained with security in mind.

Vulnerabilities
None known

Conditionally Load CF7 Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Conditionally Load CF7 Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
6
56 escaped
Nonce Checks
1
Capability Checks
4
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

90% escaped62 total outputs
Attack Surface

Conditionally Load CF7 Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 10
actionadmin_enqueue_scriptscf7-conditional-load.php:82
filterplugin_action_linkscf7-conditional-load.php:111
actionadmin_menuincludes\cf7-conditional-load-settings.php:12
actionadmin_menuincludes\cf7-conditional-load-settings.php:66
actionadmin_noticesincludes\cf7-conditional-load-settings.php:160
actionwp_enqueue_scriptsincludes\cf7-conditional-load-settings.php:388
actionadd_meta_boxesincludes\class-cf7-conditional-load-meta-box.php:21
actionsave_postincludes\class-cf7-conditional-load-meta-box.php:22
filterplugin_row_metaincludes\class-cf7-conditional-load-meta.php:41
actioninitincludes\class-cf7-conditional-load.php:47
Maintenance & Trust

Conditionally Load CF7 Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 16, 2025
PHP min version7.0
Downloads8K

Community Trust

Rating100/100
Number of ratings2
Active installs100
Developer Profile

Conditionally Load CF7 Developer Profile

Chris J. Zähller

3 plugins · 810 total installs

99
trust score
Avg Security Score
99/100
Avg Patch Time
1 days
View full developer profile
Detection Fingerprints

How We Detect Conditionally Load CF7

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/cf7-conditional-load/assets/css/admin.css/wp-content/plugins/cf7-conditional-load/assets/css/admin.min.css
Version Parameters
cf7-conditional-load/assets/css/admin.css?ver=cf7-conditional-load/assets/css/admin.min.css?ver=

HTML / DOM Fingerprints

Data Attributes
data-cf7cl
JS Globals
cf7cl_script
FAQ

Frequently Asked Questions about Conditionally Load CF7